Hi,

I was wondering why after login to windows 10 (with Verimark security key) i still have to enter my password manually the first time?

Hey @Dirk Cleiren

Thanks for writing in.

Whether the full-time Window Hello will work on any device totally depends on the Windows itself.

To determine the compatibility of the device to support Full-time Windows Hello (feature is only available with Enpass Store version), Enpass relies on this API provided by the Microsoft . It is the only way to distinguish whether the security keys are generated by a legit Hardware TPM. There is little Enpass can do in this case. Although for external TPM is available in the market we cannot ensure that they will support the given API.

Also, the system should comply with the requirement as mentioned in this FAQ.

 

hi thanks for the answer but the feature works but not the first time I switch on my pc.

After booting up I have to give manually the password, after that it works with the windows hello feature

Hey @Dirk Cleiren

There are 2 types of devices-

1. Which never need master password to unlock Enpass (Full-time Windows Hello support) : These devices have a special hardware– TPM, to securely store the master password so that Enpass can request it at the time of fresh start and Windows upon verification through Hello can provide it to Enpass to unlock keychain. So we don't ask user to enter master password at fresh start of Enpass.
2. Which requires to enter master password manually, when Enpass starts for the first time: These devices may not have TPM hardware or the Windows doesn't recognise that device as a valid TPM to support full time unlock.

It seems that you are using the type-2 of the device and your key security key doesn't support full-time Windows Hello unlocking. The same we have mentioned in our FAQ.

One can check if his/her device supports Full time Hello through an app provided by Microsoft, as I have mentioned here in another Forum: